Embedded Cybersecurity Engineer (human) at NEURA Robotics · Metzingen

At the heart of product innovation and development, our Systems Engineering Department transforms market demands into safe, certifiable, and competitive solutions and architectures. By collaborating closely with software, hardware, safety, and certification teams, we ensure every product meets the highest standards while adapting to fast-evolving market needs. Our mission is to enable seamless human-robot collaboration and deliver solutions that are safe, compliant, and ready for the future. Join us to shape the next generation of human-robot systems by owning system-level requirements, integration, and alignment, with architectural responsibilities as needed. If you thrive in cross-functional teamwork and technical excellence, you’ll find extraordinary opportunities with us.

Your Mission & Challenges

• Secure the Product: Own cybersecurity engineering for embedded robotic platforms — from secure architecture definition and threat modeling (TARA, STRIDE) through implementation of security controls (secure boot, HSM/TPM integration, authenticated firmware updates) to verification and penetration testing.
• Drive Compliance by Design: Establish and execute a secure development lifecycle aligned with IEC 62443-4-1 and EU Cyber Resilience Act requirements. Ensure component-level compliance per IEC 62443-4-2, including SBOM management, vulnerability handling, and security update processes.
• Embed in Engineering: Work hands-on with robotics HW, SW, and systems engineering teams to derive, allocate, and validate cybersecurity requirements across embedded controllers, sensor interfaces, communication stacks, and edge compute nodes.
• Bridge to Cloud Security: Define and enforce the cybersecurity boundary between embedded/edge systems and cloud-connected services. Align threat models, trust boundaries, and security controls with the cloud cybersecurity team to ensure end-to-end integrity across the full system architecture.
• Shape the Security Posture: Monitor the evolving regulatory landscape (EU Machinery Regulation, Cyber Resilience Act, UNECE R155, ISO/SAE 21434) and translate new requirements into actionable engineering guidance. Drive vulnerability disclosure, incident response readiness, and cross-project lessons learned.

What We Can Look Forward To

• Education: MSc in Computer Science, Electrical Engineering, Embedded Systems, IT Security, or related field. ISA/IEC 62443 certification, OSCP, or equivalent strongly preferred.
• Track Record: 3+ years in product/embedded cybersecurity engineering with demonstrable involvement in at least one product launch through to certification or market release. Proven ability to operate at the boundary between security engineering and embedded systems development.
• Standards Mastery: Deep expertise in IEC 62443 (especially 4-1 and 4-2). Working familiarity with ISO/SAE 21434, UNECE R155, EU Cyber Resilience Act, and NIST CSF. Understanding of how embedded cybersecurity intersects with functional safety (IEC 61508, ISO 13849).
• Technical Depth: Hands-on experience with secure boot chains, hardware security modules (HSM/TPM), cryptographic protocols (TLS, X.509), embedded Linux (Yocto) or RTOS environments, and firmware security. Proficient in threat modeling, penetration testing, and SBOM-based vulnerability management.
• Collaboration & Communication: Able to work embedded within robotics engineering teams while interfacing effectively with cloud/IT security, certification, and external auditors. Strong ability to translate cybersecurity requirements into actionable engineering constraints.